Full Disclosure: password plugin for linux?

[". /" <winter () shonkyholdings com>]

hi all,

naive question - but you know how i can load password plugins in window's to
capture password changes in the clear. is there any way to achieve the same
in linux? atm all i can think of (naively as i said) is to monitor the
shadow file or whatever and then <insert fav technique here> to open the
hash. but i am really trying to achieve a near realtime understanding of
password changes on the system side, so i can sync them out to apps or
systems or whatever.

are there pam's out there that do this? or maybe there are rootkits that can
do this, that i could canabalise the password stuff out of to pam-ify it. im
not looking to write anything nasty here - just think password sync-ing,
without like a managed enterprise approach like NIS or LDAP auth or
whatever.

any thoughts would be appreciated :)


david.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/